mailing list archives
autonomous system numbers NSE script
From: "Michael Pattrick" <mpattrick () rhinovirus org>
Date: Tue, 17 Jun 2008 20:40:42 -0400
I wrote this script to find autonomous system numbers using the method
described here .
But there are two problems:
- A query will return the same ASN if its in the same BGP netblock.
My script also discovers the BGP netblock, is there any way to cache
results in this case - ie check if the IP fits into a netblock that
we've already scanned?
- The website states that the the best way is the DNS method, and
hosts making too many whois queries will be blocked, is there a way to
forge DNS query packets in NSE or would there need to be some kind of
DNS API? I tried making the raw packet in a lua script and ssending it
out but wireshark claimed that the packet was malformed :(
I sent a copy to some of the NSE devs to see if they could figure out
a better way, so now im sending it to the list.
Here is an example of the output:
$ ./nmap --script ASQuery.nse -p80 rhinovirus.org
Starting Nmap 4.65 ( http://nmap.org ) at 2008-06-17 20:39 EDT
Interesting ports on ip-68-178-252-14.ip.secureserver.net (22.214.171.124):
PORT STATE SERVICE
80/tcp open http
Host script results:
|_ Autonomous Numbers: BGP Prefix: 126.96.36.199/22 AS number: 26496
Country Code: US
Sent through the nmap-dev mailing list
Archived at http://SecLists.Org
Re: autonomous system numbers NSE script Fyodor (Jun 29)
- autonomous system numbers NSE script Michael Pattrick (Jun 18)